This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft File: d6dcTie5EIG4MB56fE_ZA-AmGGI.mft (raw, json) Hash identifier: PHdPK7l/GpRNeslTa1rKSEjaxgJxmETjFT+c5T5TR6A= Subject key identifier: 9B:74:D6:FC:70:71:83:C2:49:B7:AA:DE:05:D0:B9:10:B5:A3:44:59 Authority key identifier: 77:A7:5C:4E:27:B9:10:81:B8:30:1E:7A:7C:4F:D9:03:E0:26:18:62 Certificate issuer: /CN=77a75c4e27b91081b8301e7a7c4fd903e0261862 Certificate serial: 019AF31B8EE8AF762BBD264F14391EBABAE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6dcTie5EIG4MB56fE_ZA-AmGGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft Manifest number: 06E1 Signing time: Sat 06 Dec 2025 10:01:00 +0000 Manifest this update: Sat 06 Dec 2025 10:01:00 +0000 Manifest next update: Sun 07 Dec 2025 10:01:00 +0000 Files and hashes: 1: d6dcTie5EIG4MB56fE_ZA-AmGGI.crl (hash: Ghnq+USwMTg/ezx3aiQN8rLagNV1VoPX6nekkR8EiSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft rsync://rpki.ripe.net/repository/DEFAULT/d6dcTie5EIG4MB56fE_ZA-AmGGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:8e:e8:af:76:2b:bd:26:4f:14:39:1e:ba:ba:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77a75c4e27b91081b8301e7a7c4fd903e0261862 Validity Not Before: Dec 6 10:01:00 2025 GMT Not After : Dec 7 10:01:00 2025 GMT Subject: CN=9b74d6fc707183c249b7aade05d0b910b5a34459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:b5:36:70:22:0d:76:99:f2:47:32:80:69:2f: 4e:67:c5:ad:90:4d:03:18:5d:f7:6d:40:5f:ef:12: 8f:ef:02:2f:3b:f0:fc:8a:42:ef:ec:b7:3f:32:44: c2:08:9a:58:3e:e8:7a:6b:b2:cd:bb:1f:0b:24:93: 81:58:d8:95:09:39:4d:ee:c4:60:20:59:c9:64:3d: 25:a9:73:ef:9c:f3:98:0f:6e:41:4c:13:ef:23:39: 10:f3:17:45:07:63:61:e8:26:62:a5:d6:8f:fb:d1: 3e:1e:50:40:ee:52:30:d1:48:b3:d2:92:1a:43:fd: da:bd:fb:d8:6d:a8:a9:f2:a8:25:32:7e:84:03:cb: d9:c7:35:f2:c6:9d:6b:68:85:60:1c:69:7c:c3:94: ef:b2:97:e0:64:8d:17:d5:40:96:09:e1:78:e2:72: f9:c4:ee:0d:97:96:55:9a:60:dc:e5:a4:4b:51:b7: 57:42:71:68:12:fc:37:38:30:ed:29:90:8c:dc:55: da:28:56:e9:7c:0b:8e:e1:dc:9c:4e:17:b5:1e:8b: d3:ff:4f:59:ea:3d:c8:da:ec:61:74:d2:0d:5f:e4: 77:bf:89:40:a7:ae:43:46:11:01:d6:88:a3:55:e2: 53:f2:a6:93:44:67:12:49:2f:08:cf:3c:7a:04:7a: 84:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:74:D6:FC:70:71:83:C2:49:B7:AA:DE:05:D0:B9:10:B5:A3:44:59 X509v3 Authority Key Identifier: keyid:77:A7:5C:4E:27:B9:10:81:B8:30:1E:7A:7C:4F:D9:03:E0:26:18:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6dcTie5EIG4MB56fE_ZA-AmGGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:5d:e4:e5:e6:a4:19:5d:82:de:80:ba:da:26:f6:21:d3:c8: 8e:1b:e8:45:22:c0:ef:26:bc:69:3e:52:e7:91:b4:5a:ac:69: 1e:46:29:71:a7:ee:18:16:bc:ae:9f:6b:d5:16:60:e8:e6:b1: 5c:c3:43:e5:4e:0d:21:17:61:85:11:ac:02:7b:ee:70:33:2a: 42:3b:bc:55:07:23:79:9d:01:14:f4:ed:ca:8f:67:95:24:8e: f7:12:52:b3:14:5d:94:8f:8e:30:d2:67:2a:fa:aa:dc:f8:1a: 49:05:4a:22:8b:40:12:28:26:a9:f3:e7:51:79:63:6f:8e:51: f4:54:88:91:a3:dd:84:ca:e2:0c:10:26:15:4d:7f:a6:88:db: eb:da:c0:96:c6:b7:ef:17:44:7b:22:09:11:80:d2:fb:5f:ea: ac:5a:38:20:3c:f4:6c:14:cc:29:29:9c:d7:9a:36:5b:19:1a: 1f:37:a6:84:74:3e:7e:6a:1a:c8:82:80:a3:ef:94:8f:c9:6a: 1b:c0:91:87:4b:0f:d9:d6:ff:09:82:7c:ef:bd:30:b8:2b:63: 1e:88:8d:c4:81:97:8d:24:18:ff:e6:8e:f0:94:7e:4e:54:c6: c5:49:94:9c:f7:80:c0:9c:d1:b4:8d:0a:83:aa:dc:41:e6:6b: 93:3a:54:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG47or3YrvSZPFDkeurrmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YTc1YzRlMjdiOTEwODFiODMwMWU3YTdjNGZkOTAzZTAy NjE4NjIwHhcNMjUxMjA2MTAwMTAwWhcNMjUxMjA3MTAwMTAwWjAzMTEwLwYDVQQD Eyg5Yjc0ZDZmYzcwNzE4M2MyNDliN2FhZGUwNWQwYjkxMGI1YTM0NDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9bU2cCINdpnyRzKAaS9OZ8WtkE0D GF33bUBf7xKP7wIvO/D8ikLv7Lc/MkTCCJpYPuh6a7LNux8LJJOBWNiVCTlN7sRg IFnJZD0lqXPvnPOYD25BTBPvIzkQ8xdFB2Nh6CZipdaP+9E+HlBA7lIw0Uiz0pIa Q/3avfvYbaip8qglMn6EA8vZxzXyxp1raIVgHGl8w5TvspfgZI0X1UCWCeF44nL5 xO4Nl5ZVmmDc5aRLUbdXQnFoEvw3ODDtKZCM3FXaKFbpfAuO4dycThe1HovT/09Z 6j3I2uxhdNINX+R3v4lAp65DRhEB1oijVeJT8qaTRGcSSS8Izzx6BHqEMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJt01vxwcYPCSbeq3gXQuRC1o0RZMB8GA1UdIwQY MBaAFHenXE4nuRCBuDAeenxP2QPgJhhiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDZkY1RpZTVFSUc0TUI1NmZFX1pBLUFtR0dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yNTczMTQtMjlhNy00ZjEyLTllN2Et NTc3NmY4M2FmYzliLzEvZDZkY1RpZTVFSUc0TUI1NmZFX1pBLUFtR0dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8yNTczMTQtMjlhNy00ZjEyLTllN2EtNTc3NmY4M2FmYzli LzEvZDZkY1RpZTVFSUc0TUI1NmZFX1pBLUFtR0dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQl3k5eak GV2C3oC62ib2IdPIjhvoRSLA7ya8aT5S55G0WqxpHkYpcafuGBa8rp9r1RZg6Oax XMND5U4NIRdhhRGsAnvucDMqQju8VQcjeZ0BFPTtyo9nlSSO9xJSsxRdlI+OMNJn Kvqq3PgaSQVKIotAEigmqfPnUXljb45R9FSIkaPdhMriDBAmFU1/pojb69rAlsa3 7xdEeyIJEYDS+1/qrFo4IDz0bBTMKSmc15o2WxkaHzemhHQ+fmoayIKAo++Uj8lq G8CRh0sP2db/CYJ8770wuCtjHoiNxIGXjSQY/+aO8JR+TlTGxUmUnPeAwJzRtI0K g6rcQeZrkzpUQA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:23:50 2025 by rpki-client